Log in Start free

WPFunnels

Products

ProductCVEsExploitedLatest
WPFunnels8–Oct 1, 2026
Mail Mint6–Sep 3, 2026
Creator LMS5–Oct 10, 2026
WPFunnels Pro1–Jun 17, 2026

Exploited and recent CVEs

  • CVE-2026-62129 Critical 9.9 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability 0.3%
  • CVE-2026-97269 Medium 6.5 WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-97271 High 7.1 WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-97244 High 7.5 WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability 0.3%
  • CVE-2026-62083 Medium 5.4 WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability 0.2%
  • CVE-2026-27371 High 7.1 WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-84755 Medium 6.5 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-84754 Medium 6.5 WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability 0.3%
  • CVE-2026-84753 Critical 9.8 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-49778 High 7.1 WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-32530 High 8.8 WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability 0.2%
  • CVE-2026-23541 High 7.5 WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69359 Medium 5.3 WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67571 Medium 5.3 WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-59570 High 7.6 WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability 0.4%
  • CVE-2025-58604 High 7.6 WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability 0.4%
  • CVE-2025-54696 Medium 6.5 WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-47530 Critical 9.8 WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability 0.5%
  • CVE-2025-47541 High 7.5 WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability 0.5%
  • CVE-2024-27965 Medium 5.9 WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability 0.3%